# 4.7.0-0.okd-2021-03-28-152009

Created: 2021-03-28 17:21:57 +0000 UTC

Image Digest: `sha256:02c01aaaed9d292376e7808b6365ed38c34856e2a13c99718b54a12958f4e6da`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-03-28-152009


## Changes from 4.7.0-0.okd-2021-02-25-144700

### Components

* Kubernetes 1.20.0-beta.2
* Fedora CoreOS upgraded from 33.20210224.10 to 33.20210323.10


### Rebuilt images without code change

* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [538ff7fe](https://github.com/openshift/cluster-image-registry-operator/commit/538ff7fed284953731785c495cf286ea33d97f50) `sha256:6158422829202f12492e672666df1833244f2f99d6eb2c44e3dc6b856ddc5fed`
* [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:f4d559435197a2061b96af198143f764c43dd59371bb3ddaf190f7f8ae5b5e0f`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#391](https://github.com/openshift/cluster-api-provider-aws/pull/391)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5ffc5f422a80169b342c19f50b22a0c4883cc0e3...2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/0074d6afef9e20f5a1bcbde85cd7c01e422202ca)

* Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART [#130](https://github.com/openshift/aws-pod-identity-webhook/pull/130)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ce1e1f3cd3ff017960039dd17b4f1968cee7cadb...0074d6afef9e20f5a1bcbde85cd7c01e422202ca)


### [branding](https://github.com/openshift/origin-branding/tree/102124a8461a9abf209e8290af47a7a8313d4689)

* [Bug 1935805](https://bugzilla.redhat.com/show_bug.cgi?id=1935805): Fix documentation link for OKD [#12](https://github.com/openshift/origin-branding/pull/12)
* [Bug 1932488](https://bugzilla.redhat.com/show_bug.cgi?id=1932488): Add CVO cluster-profile annotations [#10](https://github.com/openshift/origin-branding/pull/10)
* [Full changelog](https://github.com/openshift/origin-branding/compare/068fa1eac9f31ffe13089dd3de2ec49c153b2a14...102124a8461a9abf209e8290af47a7a8313d4689)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/2513fdbb36e2ddf13bc0b17460151c03eb3a3547)

* [Bug 1924453](https://bugzilla.redhat.com/show_bug.cgi?id=1924453): Bump github.com/gogo/protobuf to v1.3.2 [#753](https://github.com/openshift/oc/pull/753)
* [Bug 1942059](https://bugzilla.redhat.com/show_bug.cgi?id=1942059): when mirroring to a file destination, mount images under the index location [#779](https://github.com/openshift/oc/pull/779)
* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Fix unit test to use new IS [#769](https://github.com/openshift/oc/pull/769)
* [Full changelog](https://github.com/openshift/oc/compare/c66c03f3012a10f16eb86fdce6330433adf6c9ee...2513fdbb36e2ddf13bc0b17460151c03eb3a3547)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2aec1a53520e4fc9f8def5bd040e3eca917e3d02)

* [Bug 1928151](https://bugzilla.redhat.com/show_bug.cgi?id=1928151): spell fix user-visible string [#301](https://github.com/openshift/cloud-credential-operator/pull/301)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0427557ed7300864ae0068b92c4c8bfee1629b3b...2aec1a53520e4fc9f8def5bd040e3eca917e3d02)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/ac544d46b0f4aa100e40336d87ec069eca335323)

* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#190](https://github.com/openshift/kubernetes-autoscaler/pull/190)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7f1d0ad0b53d17879034597d97dac23c9a23dbcb...ac544d46b0f4aa100e40336d87ec069eca335323)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0eb71da96f0d4b70aea85c2241e226cda5865b1d)

* [Bug 1937089](https://bugzilla.redhat.com/show_bug.cgi?id=1937089): Configure CoreDNS to shut down gracefully [#247](https://github.com/openshift/cluster-dns-operator/pull/247)
* [Bug 1936587](https://bugzilla.redhat.com/show_bug.cgi?id=1936587): Set CoreDNS's cache's maximum TTL to 900 seconds [#245](https://github.com/openshift/cluster-dns-operator/pull/245)
* [Bug 1928304](https://bugzilla.redhat.com/show_bug.cgi?id=1928304): Set CoreDNS readiness probe period and timeout each to 3 seconds [#235](https://github.com/openshift/cluster-dns-operator/pull/235)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0521d2d5806835bd8a39cfb867c132623cb4a8a6...0eb71da96f0d4b70aea85c2241e226cda5865b1d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ee35da5b3ee486f786d7687849d57599d46dfc2e)

* [Bug 1925739](https://bugzilla.redhat.com/show_bug.cgi?id=1925739): pkg/operator/metriccontroller: cleanup transports [#537](https://github.com/openshift/cluster-etcd-operator/pull/537)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/51ce9d65c03d0c382389209d41301ca6208d6de9...ee35da5b3ee486f786d7687849d57599d46dfc2e)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1d9717b7624acee5c40d9a2f6bffbf7e628fd23d)

* [Bug 1937214](https://bugzilla.redhat.com/show_bug.cgi?id=1937214): Fix spurious reconciliation of NodePort services [#570](https://github.com/openshift/cluster-ingress-operator/pull/570)
* [Bug 1935891](https://bugzilla.redhat.com/show_bug.cgi?id=1935891): Canary: Perform canary test probes over https [#566](https://github.com/openshift/cluster-ingress-operator/pull/566)
* [Bug 1936093](https://bugzilla.redhat.com/show_bug.cgi?id=1936093): Canary: Use cluster-wide proxy for canary client [#568](https://github.com/openshift/cluster-ingress-operator/pull/568)
* [Bug 1934904](https://bugzilla.redhat.com/show_bug.cgi?id=1934904): Canary: Schedule canary server pods to worker and infra nodes [#564](https://github.com/openshift/cluster-ingress-operator/pull/564)
* [Bug 1932649](https://bugzilla.redhat.com/show_bug.cgi?id=1932649): Canary: Add edge termination to canary route [#558](https://github.com/openshift/cluster-ingress-operator/pull/558)
* [Bug 1927080](https://bugzilla.redhat.com/show_bug.cgi?id=1927080): Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. [#546](https://github.com/openshift/cluster-ingress-operator/pull/546)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b536b856e3923876851ca98a758366d58026897c...1d9717b7624acee5c40d9a2f6bffbf7e628fd23d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/60dc437fe7f19ea91be6900e5e4974d7dadbeb11)

* [Bug 1927644](https://bugzilla.redhat.com/show_bug.cgi?id=1927644): bootstrap: add --advertise-address=pod.status.hostIP [#1042](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1042)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b1cbe974244310a709d858a10cc6adcbc10118d6...60dc437fe7f19ea91be6900e5e4974d7dadbeb11)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/281590936f3a94d4ae1eb008709fda6614fe763b)

* [Bug 1924488](https://bugzilla.redhat.com/show_bug.cgi?id=1924488): Bump github.com/gogo/protobuf to v1.3.2 [#508](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/508)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d95b6453169b9a43d01e939f060919d2a7a6e94f...281590936f3a94d4ae1eb008709fda6614fe763b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b2204ca23a57e9f01af915375e6a18fc86ffecda)

* [Bug 1924490](https://bugzilla.redhat.com/show_bug.cgi?id=1924490): Bump github.com/gogo/protobuf to v1.3.2 [#334](https://github.com/openshift/cluster-kube-scheduler-operator/pull/334)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/776a21927cdedf968dd368638c14b7ba998dbe65...b2204ca23a57e9f01af915375e6a18fc86ffecda)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/54484757581ec26f178c599215715bafd6029582)

* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#38](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/572caa117777db92d52564290522be3489f40074...54484757581ec26f178c599215715bafd6029582)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3b4ba34a9afd6cedf534445d52d279fdd01e36a5)

* [Bug 1926876](https://bugzilla.redhat.com/show_bug.cgi?id=1926876): pkg/manifests: fix prometheus-proxy trustedCA [#1051](https://github.com/openshift/cluster-monitoring-operator/pull/1051)
* [Bug 1932820](https://bugzilla.redhat.com/show_bug.cgi?id=1932820): Remove kube-apiserver-availability.rules [#1069](https://github.com/openshift/cluster-monitoring-operator/pull/1069)
* [Bug 1930876](https://bugzilla.redhat.com/show_bug.cgi?id=1930876): etcdInsufficientMembers is wrong when etcd is in a pod [#1066](https://github.com/openshift/cluster-monitoring-operator/pull/1066)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/51e4220feeac45c25e95aed2f931710f8e5314d4...3b4ba34a9afd6cedf534445d52d279fdd01e36a5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fff8ccbf7647d260ca6ce3c075e20014ac255860)

* [Bug 1940806](https://bugzilla.redhat.com/show_bug.cgi?id=1940806): OVN Upgrade: fix upgrade order of node and master [#1029](https://github.com/openshift/cluster-network-operator/pull/1029)
* [Bug 1929371](https://bugzilla.redhat.com/show_bug.cgi?id=1929371): Don't set ClusterOperator Version until rollout is complete [#983](https://github.com/openshift/cluster-network-operator/pull/983)
* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual stack migration [#1017](https://github.com/openshift/cluster-network-operator/pull/1017)
* [Bug 1928028](https://bugzilla.redhat.com/show_bug.cgi?id=1928028): Kuryr: Let Kuryr autodetect primary CNI interface [#978](https://github.com/openshift/cluster-network-operator/pull/978)
* [Bug 1935473](https://bugzilla.redhat.com/show_bug.cgi?id=1935473): Include LB members for Machines created on day-2 operation [#1002](https://github.com/openshift/cluster-network-operator/pull/1002)
* [Bug 1929168](https://bugzilla.redhat.com/show_bug.cgi?id=1929168): Kuryr: Always set worker_nodes_subnets [#987](https://github.com/openshift/cluster-network-operator/pull/987)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b760580bb703ef3db6b9a04df17b3ff2a158464e...fff8ccbf7647d260ca6ce3c075e20014ac255860)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/78e1417e306a54b589c5cfce659f672a74bc0456)

* [Bug 1928614](https://bugzilla.redhat.com/show_bug.cgi?id=1928614): Keep ignition units in sync with [service] plugin. [#215](https://github.com/openshift/cluster-node-tuning-operator/pull/215)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/24392937d275074c73294d3e02ea71b2f1e16299...78e1417e306a54b589c5cfce659f672a74bc0456)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/3193372af4e97dbf504f21ab84fe0d41cd96ec73)

* [Bug 1931856](https://bugzilla.redhat.com/show_bug.cgi?id=1931856): Set registry routes in operand config [#199](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/199)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/7d311b378ea9ccbf486a9fea9bce8ef53345c5ef...3193372af4e97dbf504f21ab84fe0d41cd96ec73)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/42791bac64066daac0922b3d77e4bd86edae3b4e)

* [Bug 1924496](https://bugzilla.redhat.com/show_bug.cgi?id=1924496): Bump github.com/gogo/protobuf to v1.3.2 [#58](https://github.com/openshift/cluster-policy-controller/pull/58)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3ca5e1497a1d77b5337701087b4bdbcd81283f9f...42791bac64066daac0922b3d77e4bd86edae3b4e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7df967b0c2ed0763d6d0fe7f9c8623e9f970a760)

* [Bug 1941217](https://bugzilla.redhat.com/show_bug.cgi?id=1941217): pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator [#534](https://github.com/openshift/cluster-version-operator/pull/534)
* [Bug 1926795](https://bugzilla.redhat.com/show_bug.cgi?id=1926795): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#516](https://github.com/openshift/cluster-version-operator/pull/516)
* [Bug 1921413](https://bugzilla.redhat.com/show_bug.cgi?id=1921413): pkg/start: Fix shutdown deadlock when die before getting a leader lock [#521](https://github.com/openshift/cluster-version-operator/pull/521)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9e25ac8815dbf0d7b97dc640ad78071e49391a54...7df967b0c2ed0763d6d0fe7f9c8623e9f970a760)


### [console](https://github.com/openshift/console/tree/5c7d09c9a8d4e4d58e25508cd7103cffadfdba39)

* [Bug 1943441](https://bugzilla.redhat.com/show_bug.cgi?id=1943441): Add 'Roll Back' action for Replication Controllers and Replica Sets [#8475](https://github.com/openshift/console/pull/8475)
* [Bug 1925792](https://bugzilla.redhat.com/show_bug.cgi?id=1925792): Fix translation for edit annotation [#8078](https://github.com/openshift/console/pull/8078)
* [Bug 1941468](https://bugzilla.redhat.com/show_bug.cgi?id=1941468): Change link for not available state [#8431](https://github.com/openshift/console/pull/8431)
* [Bug 1939608](https://bugzilla.redhat.com/show_bug.cgi?id=1939608): Fix null handling in FilterToolbar_ to prevent possible exceptions [#8394](https://github.com/openshift/console/pull/8394)
* [Bug 1937356](https://bugzilla.redhat.com/show_bug.cgi?id=1937356): Fix to show correct internal image-stream name in container image edit flow's internal registry image-stream dropdown for kn service [#8353](https://github.com/openshift/console/pull/8353)
* [Bug 1927198](https://bugzilla.redhat.com/show_bug.cgi?id=1927198): fix pvc string in pvc.view [#8126](https://github.com/openshift/console/pull/8126)
* [Bug 1927311](https://bugzilla.redhat.com/show_bug.cgi?id=1927311): avoid 404 errors attempting to load en-US [#8128](https://github.com/openshift/console/pull/8128)
* [Bug 1931382](https://bugzilla.redhat.com/show_bug.cgi?id=1931382): Hide pipeline section in container image edit flow [#8209](https://github.com/openshift/console/pull/8209)
* [Bug 1933665](https://bugzilla.redhat.com/show_bug.cgi?id=1933665): [release-4.7] Create ImageStream and other resources for samples step by step [#8255](https://github.com/openshift/console/pull/8255)
* [Bug 1935672](https://bugzilla.redhat.com/show_bug.cgi?id=1935672): [release-4.7] fix pipelinerun status icon rendering issue [#8311](https://github.com/openshift/console/pull/8311)
* [Bug 1932272](https://bugzilla.redhat.com/show_bug.cgi?id=1932272): Fix KMS validation error for 4.7 release [#8221](https://github.com/openshift/console/pull/8221)
* [Bug 1937313](https://bugzilla.redhat.com/show_bug.cgi?id=1937313): Removed loaded prop and nested component [#8351](https://github.com/openshift/console/pull/8351)
* [Bug 1936803](https://bugzilla.redhat.com/show_bug.cgi?id=1936803): support service binding operator version 0.5.0 [#8335](https://github.com/openshift/console/pull/8335)
* [Bug 1937469](https://bugzilla.redhat.com/show_bug.cgi?id=1937469): Pod/node/ip/template isn't showing when vm is running [#8357](https://github.com/openshift/console/pull/8357)
* [Bug 1932277](https://bugzilla.redhat.com/show_bug.cgi?id=1932277): Create new pool with arbiter - wrong replica (4.7 release) [#8234](https://github.com/openshift/console/pull/8234)
* [Bug 1930152](https://bugzilla.redhat.com/show_bug.cgi?id=1930152): Do not fail new VM wizard when no storage classes are available [#8190](https://github.com/openshift/console/pull/8190)
* [Bug 1937086](https://bugzilla.redhat.com/show_bug.cgi?id=1937086): Fix topology crash due to selfLink deprecation [#8317](https://github.com/openshift/console/pull/8317)
* [Bug 1928228](https://bugzilla.redhat.com/show_bug.cgi?id=1928228): retry co-fetch on 409 POST or 429 [#8154](https://github.com/openshift/console/pull/8154)
* [Bug 1932151](https://bugzilla.redhat.com/show_bug.cgi?id=1932151): Fix rendering of access-mode selector [#8229](https://github.com/openshift/console/pull/8229)
* [Bug 1929198](https://bugzilla.redhat.com/show_bug.cgi?id=1929198): allow choice of binding type when creating RoleBinding [#8172](https://github.com/openshift/console/pull/8172)
* [Bug 1928023](https://bugzilla.redhat.com/show_bug.cgi?id=1928023): Consider finally tasks when calculating task status [#8149](https://github.com/openshift/console/pull/8149)
* [Bug 1927407](https://bugzilla.redhat.com/show_bug.cgi?id=1927407): update pf virtualized dependency to fix breakpoint prop missing in virtualized table [#8130](https://github.com/openshift/console/pull/8130)
* [Bug 1932968](https://bugzilla.redhat.com/show_bug.cgi?id=1932968): Fix to avoid overriding of d/dc pod template container values [#8248](https://github.com/openshift/console/pull/8248)
* [Bug 1926830](https://bugzilla.redhat.com/show_bug.cgi?id=1926830): [CI][e2e] Add storage.bind.immediate.requested annotation to golden image dvs [#8245](https://github.com/openshift/console/pull/8245)
* [Full changelog](https://github.com/openshift/console/compare/0466794b54165e28941dd5f3c4486b40f2762f54...5c7d09c9a8d4e4d58e25508cd7103cffadfdba39)


### [console-operator](https://github.com/openshift/console-operator/tree/4f933d59784bd37216466ca329ea51fc797b99a1)

* [Bug 1936337](https://bugzilla.redhat.com/show_bug.cgi?id=1936337): Check for error when generating default and user-defined config for the console-config configmap [#512](https://github.com/openshift/console-operator/pull/512)
* [Full changelog](https://github.com/openshift/console-operator/compare/c1efdfc6294cd32c071142da770b9410a97aff3c...4f933d59784bd37216466ca329ea51fc797b99a1)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/5202bfdc042bafa732f19dcbec31ca6137fa3fa4)

* [Bug 1933659](https://bugzilla.redhat.com/show_bug.cgi?id=1933659): Add udev to the driver image [#47](https://github.com/openshift/cloud-provider-openstack/pull/47)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/7def9722bc0c3c34336ceee8331eee27ec3f4c7f...5202bfdc042bafa732f19dcbec31ca6137fa3fa4)


### [docker-builder](https://github.com/openshift/builder/tree/14156f392c82ac10a230c313cc93b3951af1f592)

* [Bug 1924554](https://bugzilla.redhat.com/show_bug.cgi?id=1924554): bump(cni) 0.8.1 [#234](https://github.com/openshift/builder/pull/234)
* [Bug 1940052](https://bugzilla.redhat.com/show_bug.cgi?id=1940052): retry image pulls during builds [#226](https://github.com/openshift/builder/pull/226)
* [Bug 1939218](https://bugzilla.redhat.com/show_bug.cgi?id=1939218): bump(containers/*): [#224](https://github.com/openshift/builder/pull/224)
* [Full changelog](https://github.com/openshift/builder/compare/67e88c5fafb9c49f228f48810e34af07db9581f0...14156f392c82ac10a230c313cc93b3951af1f592)


### [etcd](https://github.com/openshift/etcd/tree/cca97c76b915b1d14abd39814995fa1e2d087145)

* Updating ose-etcd builder & base images to be consistent with ART [#67](https://github.com/openshift/etcd/pull/67)
* [Full changelog](https://github.com/openshift/etcd/compare/2afb11e155d34d669152df23f548af2047e5d3b4...cca97c76b915b1d14abd39814995fa1e2d087145)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/7215497c95a43c5f633bc511e3e85dd1d956a931)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#151](https://github.com/openshift/cluster-api-provider-gcp/pull/151)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/186b21520ddb0f1e29d3a709715369135fcaebcd...7215497c95a43c5f633bc511e3e85dd1d956a931)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3)

* Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#11](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/11)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/a45832bfce49e318b29e5c69849aa01d8f0b5adc...3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3)


### [grafana](https://github.com/openshift/grafana/tree/b02c35dc2d01fce696a3edc28839a9f9fd0150a3)

* Updating grafana builder & base images to be consistent with ART [#54](https://github.com/openshift/grafana/pull/54)
* [Full changelog](https://github.com/openshift/grafana/compare/cf0a81cb4b68a2543249def193e1b83e94734725...b02c35dc2d01fce696a3edc28839a9f9fd0150a3)


### [haproxy-router](https://github.com/openshift/router/tree/130b5993726c46e83ca871a97a930d73f2c433a8)

* [Bug 1942534](https://bugzilla.redhat.com/show_bug.cgi?id=1942534): [4.7 backport] Route gets admitted with invalid host name if override annotation is used [#273](https://github.com/openshift/router/pull/273)
* [Bug 1938921](https://bugzilla.redhat.com/show_bug.cgi?id=1938921): router/template: Cache compiled regular expressions [#269](https://github.com/openshift/router/pull/269)
* [Full changelog](https://github.com/openshift/router/compare/30e2fb5b65753e6b6593f61b16768a5229b5bd97...130b5993726c46e83ca871a97a930d73f2c433a8)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/8eaf43f001f50c584d62f267a0030c23daa25ac8)

* [Bug 1941574](https://bugzilla.redhat.com/show_bug.cgi?id=1941574): test/extended/router/idle: skip test on virt platforms [#25999](https://github.com/openshift/origin/pull/25999)
* [Bug 1940866](https://bugzilla.redhat.com/show_bug.cgi?id=1940866): Add BareMetalPlatformType into e2e upgrade service unsupported list [#25989](https://github.com/openshift/origin/pull/25989)
* [Bug 1927953](https://bugzilla.redhat.com/show_bug.cgi?id=1927953): test/extended/router/idle: address flakes/failures seen in CI [#25892](https://github.com/openshift/origin/pull/25892)
* [Bug 1931622](https://bugzilla.redhat.com/show_bug.cgi?id=1931622): test: add vsphere to unsupported platforms for LB service [#25913](https://github.com/openshift/origin/pull/25913)
* [Bug 1932806](https://bugzilla.redhat.com/show_bug.cgi?id=1932806): release-4.7: e2e: test OAuth API connections in the tests by that name [#25894](https://github.com/openshift/origin/pull/25894)
* [Bug 1935707](https://bugzilla.redhat.com/show_bug.cgi?id=1935707): [release-4.7] test: Detect when the master pool is still updating after upgrade [#25941](https://github.com/openshift/origin/pull/25941)
* [Bug 1931401](https://bugzilla.redhat.com/show_bug.cgi?id=1931401): fix sig-cli flakes [#25910](https://github.com/openshift/origin/pull/25910)
* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Update tests to use Ruby 2.7 [#25966](https://github.com/openshift/origin/pull/25966)
* [Bug 1927554](https://bugzilla.redhat.com/show_bug.cgi?id=1927554): adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions [#25884](https://github.com/openshift/origin/pull/25884)
* [Full changelog](https://github.com/openshift/origin/compare/98a759fa802ab87153d0c75b18bc977a91154f69...8eaf43f001f50c584d62f267a0030c23daa25ac8)


### [hyperkube](https://github.com/openshift/kubernetes/tree/bafe72fb05eddc8246040b9945ec242b9f805935)

* [Bug 1931702](https://bugzilla.redhat.com/show_bug.cgi?id=1931702): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#589](https://github.com/openshift/kubernetes/pull/589)
* [Bug 1931745](https://bugzilla.redhat.com/show_bug.cgi?id=1931745): UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#590](https://github.com/openshift/kubernetes/pull/590)
* [Bug 1929674](https://bugzilla.redhat.com/show_bug.cgi?id=1929674): kubelet: fix create sandbox delete pod race [#591](https://github.com/openshift/kubernetes/pull/591)
* [Bug 1933094](https://bugzilla.redhat.com/show_bug.cgi?id=1933094): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#595](https://github.com/openshift/kubernetes/pull/595)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5fbfd197c16d3c5facbaa1d7b9f3ea58cf6b36e9...bafe72fb05eddc8246040b9945ec242b9f805935)


### [insights-operator](https://github.com/openshift/insights-operator/tree/23a298922d25de761c8f765625d6ebb63a25774e)

* [Bug 1942068](https://bugzilla.redhat.com/show_bug.cgi?id=1942068): Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) [#383](https://github.com/openshift/insights-operator/pull/383)
* [Bug 1939061](https://bugzilla.redhat.com/show_bug.cgi?id=1939061): Sap license management logs gatherer 4.7 (#372) [#372](https://github.com/openshift/insights-operator/pull/372)
* Adds memory usage to the metadata (#364) [#364](https://github.com/openshift/insights-operator/pull/364)
* [Bug 1935070](https://bugzilla.redhat.com/show_bug.cgi?id=1935070): Extend the OLM operator data with related … (#362) [#362](https://github.com/openshift/insights-operator/pull/362)
* [Bug 1934442](https://bugzilla.redhat.com/show_bug.cgi?id=1934442): Gather info about unhealthy SAP pods (#360) [#360](https://github.com/openshift/insights-operator/pull/360)
* [Bug 1936802](https://bugzilla.redhat.com/show_bug.cgi?id=1936802): Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) [#369](https://github.com/openshift/insights-operator/pull/369)
* [Bug 1936861](https://bugzilla.redhat.com/show_bug.cgi?id=1936861): Include namespace name in binarydata configmap path & test (#368) (#370) [#368](https://github.com/openshift/insights-operator/pull/368)
* [Bug 1925659](https://bugzilla.redhat.com/show_bug.cgi?id=1925659): Relax the recent log gatherers to avoid degrading during… (#331) [#331](https://github.com/openshift/insights-operator/pull/331)
* [Full changelog](https://github.com/openshift/insights-operator/compare/f775f04ad38f7fbd40b13fc9a6593f75ed7c3896...23a298922d25de761c8f765625d6ebb63a25774e)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4)

* Updating ironic-rhcos-downloader builder & base images to be consistent with ART [#34](https://github.com/openshift/ironic-rhcos-downloader/pull/34)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4ff1a017e2e00d572cdb6969dc178d4a91b0d1e2...4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/503e5770e622bf78a746628a8b276a2616365135)

* [release 4.7] Bug 1929118: update kubernetes-client-api [#1230](https://github.com/openshift/jenkins/pull/1230)
* [Bug 1925484](https://bugzilla.redhat.com/show_bug.cgi?id=1925484): Upgrade Jenkins to 2.263.3 [#1220](https://github.com/openshift/jenkins/pull/1220)
* [Full changelog](https://github.com/openshift/jenkins/compare/4d8af8fd82a5c8dd4d8f7c40f11c73f971f638f1...503e5770e622bf78a746628a8b276a2616365135)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9ddcd3669847fba83222504c91506f300bf081e3)

* [Bug 1924830](https://bugzilla.redhat.com/show_bug.cgi?id=1924830): CVE-2021-3121 gogo/protobuf lacks certain index validation [#265](https://github.com/openshift/sdn/pull/265)
* [Bug 1936920](https://bugzilla.redhat.com/show_bug.cgi?id=1936920): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#272](https://github.com/openshift/sdn/pull/272)
* [Bug 1928304](https://bugzilla.redhat.com/show_bug.cgi?id=1928304): Prefer local endpoint for cluster DNS service [#259](https://github.com/openshift/sdn/pull/259)
* [Full changelog](https://github.com/openshift/sdn/compare/6cc7a66e222779b74b37cc6ac9c6c636e8adea7f...9ddcd3669847fba83222504c91506f300bf081e3)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/d49acc455c98dead4995e34add0bf9f3e6e7324b)

* [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Ignore headless services in NP code [#487](https://github.com/openshift/kuryr-kubernetes/pull/487)
* [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Do not default protocol to TCP for allow-all NPs [#480](https://github.com/openshift/kuryr-kubernetes/pull/480)
* [Bug 1930017](https://bugzilla.redhat.com/show_bug.cgi?id=1930017): Narrow connection to the cluster only on namespaceSelector [#460](https://github.com/openshift/kuryr-kubernetes/pull/460)
* [Bug 1928029](https://bugzilla.redhat.com/show_bug.cgi?id=1928029): Get trunks more diligently [#449](https://github.com/openshift/kuryr-kubernetes/pull/449)
* [Bug 1929168](https://bugzilla.redhat.com/show_bug.cgi?id=1929168): OpenShift: Add configured subnets to the detected [#457](https://github.com/openshift/kuryr-kubernetes/pull/457)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/223c9a0827d8c557162976ce08a63c4fa8126049...d49acc455c98dead4995e34add0bf9f3e6e7324b)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/033be25ca038fe773b23c076e9ac64926de72474)

* [Bug 1938316](https://bugzilla.redhat.com/show_bug.cgi?id=1938316): [release-4.7] Update MAO and set metrics on :8081 address [#219](https://github.com/openshift/cluster-api-provider-libvirt/pull/219)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/b57e18b197838f6d6c377cca00fd47f9af645f3f...033be25ca038fe773b23c076e9ac64926de72474)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)

* [Bug 1929721](https://bugzilla.redhat.com/show_bug.cgi?id=1929721): Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption [#818](https://github.com/openshift/machine-api-operator/pull/818)
* [Bug 1934798](https://bugzilla.redhat.com/show_bug.cgi?id=1934798): reuse mgr client in webhooks [#821](https://github.com/openshift/machine-api-operator/pull/821)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/96d954d0c1916b44882a3385cdbf5d3322c81dcc...a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/b632cfe7be5dc185b8259395daacc82922178fb8)

* overlay: add NetworkManager config to prevent requesting additional MAC [#109](https://github.com/openshift/okd-machine-os/pull/109)
* overlay: add dhcp-client-identifier [#101](https://github.com/openshift/okd-machine-os/pull/101)
* manifests: add include.release annotations [#98](https://github.com/openshift/okd-machine-os/pull/98)
* Switch to stable FCOS stream [#96](https://github.com/openshift/okd-machine-os/pull/96)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/0b29c4d767dc36b48c9bdc7ab8786fc4e83cec33...b632cfe7be5dc185b8259395daacc82922178fb8)


### [multus-cni](https://github.com/openshift/multus-cni/tree/1728ddf0d06ef43386aa64aeab41a9e0380c6813)

* [Bug 1936334](https://bugzilla.redhat.com/show_bug.cgi?id=1936334): Updating multus-cni builder & base images to be consistent with ART [#81](https://github.com/openshift/multus-cni/pull/81)
* [Full changelog](https://github.com/openshift/multus-cni/compare/7aa53b3cb5ae0ae4b03906803c7aff37447d4357...1728ddf0d06ef43386aa64aeab41a9e0380c6813)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dfe6b395b67c0cede73e6edf758976ae208b930c)

* [Bug 1931950](https://bugzilla.redhat.com/show_bug.cgi?id=1931950): [backport 4.7] Fix for IPv6 when leading hextets equal zero [#49](https://github.com/openshift/whereabouts-cni/pull/49)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/900aa4231bd31026b3a305f8077c8959f51d8059...dfe6b395b67c0cede73e6edf758976ae208b930c)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/69f527e90f599e0f509cfce73ba7b95656f03f7f)

* [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#43](https://github.com/openshift/oauth-apiserver/pull/43)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/d00e67a0b5e0d7c303b201a5bbcb943a9bc26774...69f527e90f599e0f509cfce73ba7b95656f03f7f)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a0f41548179e57e9b184a3e713ac6227cc4385ff)

* [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#187](https://github.com/openshift/openshift-apiserver/pull/187)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/d7ccc71549d84594bfc7f5deda2ed61de7bde100...a0f41548179e57e9b184a3e713ac6227cc4385ff)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/44f92b8a8e6d8f716eef00b192f4d80441ea160d)

* [Bug 1937375](https://bugzilla.redhat.com/show_bug.cgi?id=1937375): only override deployment resources when explicitly defined in subscription config [#2036](https://github.com/operator-framework/operator-lifecycle-manager/pull/2036)
* [Bug 1933839](https://bugzilla.redhat.com/show_bug.cgi?id=1933839): bump k8s.io/apiserver for webhook authorizer panic fix [#2022](https://github.com/operator-framework/operator-lifecycle-manager/pull/2022)
* [Bug 1936707](https://bugzilla.redhat.com/show_bug.cgi?id=1936707): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2034](https://github.com/operator-framework/operator-lifecycle-manager/pull/2034)
* [Bug 1938405](https://bugzilla.redhat.com/show_bug.cgi?id=1938405): Support jittering relatively small resync intervals. [#2041](https://github.com/operator-framework/operator-lifecycle-manager/pull/2041)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#2013](https://github.com/operator-framework/operator-lifecycle-manager/pull/2013)
* [Bug 1934724](https://bugzilla.redhat.com/show_bug.cgi?id=1934724): fix(resolver): Allow skipped versions to be installed initially [#2027](https://github.com/operator-framework/operator-lifecycle-manager/pull/2027)
* [Bug 1929904](https://bugzilla.redhat.com/show_bug.cgi?id=1929904): Infer package name property for unannotated CSVs, if possible. [#2033](https://github.com/operator-framework/operator-lifecycle-manager/pull/2033)
* [Bug 1932002](https://bugzilla.redhat.com/show_bug.cgi?id=1932002): Only one of multiple subscriptions to the same package is honored [#2009](https://github.com/operator-framework/operator-lifecycle-manager/pull/2009)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/4b67acc560a790caa37fdff2f2c1a1eb50a4949f...44f92b8a8e6d8f716eef00b192f4d80441ea160d)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/96bab9b9f5bb2c8fce141992230cf75e48f14f78)

* Updating marketplace-operator builder & base images to be consistent with ART [#367](https://github.com/operator-framework/operator-marketplace/pull/367)
* [Bug 1927456](https://bugzilla.redhat.com/show_bug.cgi?id=1927456): update defaults to 4.7 [#382](https://github.com/operator-framework/operator-marketplace/pull/382)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/37d14d1aaaba2cd223469b5d4b2513c1292151a9...96bab9b9f5bb2c8fce141992230cf75e48f14f78)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a97d366a92d302ff2056fa2d19aa3e48b0fbc99c)

* [Bug 1931903](https://bugzilla.redhat.com/show_bug.cgi?id=1931903): add missing closes [#597](https://github.com/operator-framework/operator-registry/pull/597)
* Updating operator-registry builder & base images to be consistent with ART [#584](https://github.com/operator-framework/operator-registry/pull/584)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/6183dbb3567397e759f25752011834f86f47a3ea...a97d366a92d302ff2056fa2d19aa3e48b0fbc99c)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6)

* [Bug 1929777](https://bugzilla.redhat.com/show_bug.cgi?id=1929777): Run config informers when starting the operator [#49](https://github.com/openshift/ovirt-csi-driver-operator/pull/49)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/4831f16a8f43fc3745872ca0ce8a1e7ed1e429db...f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/e6fa5e240bca27e126b9de179e8c56220f1a9c44)

* [Bug 1939199](https://bugzilla.redhat.com/show_bug.cgi?id=1939199): move to go 1.15 and registry.ci.openshift.org [#97](https://github.com/openshift/cluster-api-provider-ovirt/pull/97)
* [Bug 1927256](https://bugzilla.redhat.com/show_bug.cgi?id=1927256): Bump K8s dependencies to 1.20 [#92](https://github.com/openshift/cluster-api-provider-ovirt/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/4708c8bbbf01634892f4699dedb3d7a34392903b...e6fa5e240bca27e126b9de179e8c56220f1a9c44)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/1481e2d2b1716fc3abeac8c59bc8ff8ed3457d08)

* [Bug 1931520](https://bugzilla.redhat.com/show_bug.cgi?id=1931520): Backport Fix ACL syntax for dual-stack [#465](https://github.com/openshift/ovn-kubernetes/pull/465)
* [Bug 1943310](https://bugzilla.redhat.com/show_bug.cgi?id=1943310): [4.7] Enable DB memory trimming on compaction [#477](https://github.com/openshift/ovn-kubernetes/pull/477)
* [Bug 1932268](https://bugzilla.redhat.com/show_bug.cgi?id=1932268): detect if the cluster has endpoint slices [#442](https://github.com/openshift/ovn-kubernetes/pull/442)
* [Bug 1935180](https://bugzilla.redhat.com/show_bug.cgi?id=1935180): Backport Fix mcast querier [#468](https://github.com/openshift/ovn-kubernetes/pull/468)
* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual-stack conversion [#460](https://github.com/openshift/ovn-kubernetes/pull/460)
* [Bug 1934645](https://bugzilla.redhat.com/show_bug.cgi?id=1934645): Backport enable support for BFD on external gateway routes [#462](https://github.com/openshift/ovn-kubernetes/pull/462)
* [Bug 1925475](https://bugzilla.redhat.com/show_bug.cgi?id=1925475): Bump OVN to ovn2.13-20.12.0-24.el8fdp [#451](https://github.com/openshift/ovn-kubernetes/pull/451)
* [Bug 1937238](https://bugzilla.redhat.com/show_bug.cgi?id=1937238): Refactor chain setup for NodePort and ExternalIP [#457](https://github.com/openshift/ovn-kubernetes/pull/457)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ef03521f5daede4fe0f8afd9f42035259636006b...1481e2d2b1716fc3abeac8c59bc8ff8ed3457d08)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/db87872c6aba7e4e9def29b33beea582557ce940)

* Updating prom-label-proxy builder & base images to be consistent with ART [#330](https://github.com/openshift/prom-label-proxy/pull/330)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/88d4df5541251ea122687610870e725b0099213a...db87872c6aba7e4e9def29b33beea582557ce940)


### [telemeter](https://github.com/openshift/telemeter/tree/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)

* Updating telemeter builder & base images to be consistent with ART [#369](https://github.com/openshift/telemeter/pull/369)
* [Full changelog](https://github.com/openshift/telemeter/compare/8742aae6505eebe6a12bffba8223a66ee5fc4a88...e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/077d6bef3bc1e003188e0bea4e086c874f97f944)

* [Bug 1936975](https://bugzilla.redhat.com/show_bug.cgi?id=1936975): Fix deadlock when enqueing functions into the pool [#35](https://github.com/openshift/vsphere-problem-detector/pull/35)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/602c27477b66fd8752b7c39a13b6b948731e60eb...077d6bef3bc1e003188e0bea4e086c874f97f944)